Weekly browser binaries (20200829)

New build of Serpent/UXP for XP!

Test binary:
Win32 https://o.rths.ml/basilisk/basilisk52-g4.6.win32-git-20200829-57e81f0-uxp-5559674be-xpmod.7z
Win64 https://o.rths.ml/basilisk/basilisk52-g4.6.win64-git-20200829-57e81f0-uxp-5559674be-xpmod.7z

source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/custom

IA32 Win32 https://o.rths.ml/basilisk/basilisk52-g4.6.win32-git-20200829-57e81f0-uxp-5559674be-xpmod-ia32.7z

source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/ia32

NM28XP build:
Win32 https://o.rths.ml/palemoon/palemoon-28.10.2a1.win32-git-20200829-0882134ff-uxp-5559674be-xpmod.7z
Win64 https://o.rths.ml/palemoon/palemoon-28.10.2a1.win64-git-20200829-0882134ff-uxp-5559674be-xpmod.7z

Official UXP changes since my last build:
- Issue #618 - Fix error events fired when loading JS module dependencies fail (786e34469)
- Issue #618 - Align error handling for module scripts with the spec (again) (43e0632cd)
- Issue #618 - Use a single slot for the module's environment object. (6e72707e0)
- Issue #618 - Lazily initialise module binding maps (e94f9dcce)
- Issue #618 - Record module dependency before starting fetch so that error handling works correctly (8447c4d8a)
- Issue #618 - Remove eager instantiation - Debug follow up (007c54c80)
- Issue #618 - Lazily initialise module binding maps - Debug follow up (609815070)
- Issue #618 - Align error handling for module scripts with the spec - Debug follow up (c5b47eb66)
- Merge pull request #1626 from g4jc/618 (501b29a5d)
- Issue #618 - Simplify module map interface (7e673b1db)
- Issue #618 - Keep track of which modules in a graph have been fetched using a visited set (15a7be79b)
- Merge pull request #1627 from g4jc/618 (1c342a57e)
- [js] Add some utility functions to get the current JS runtime. (c349f04f9)
- Issue #618 - Simplify module resolve hook to be a function pointer (9b6252893)
- [js] Try to catch bad pointers for GC and bail if not valid. (e1e535c1c)
- Merge branch 'master' into es-modules-work (11285cd0d)
- Issue #618: Ignore 'event' and 'for' attributes for module scripts. (4f0d9497f)
- Issue #618: Pass down referrer and referrer policy when fetching modules. (86f128d41)
- Merge branch 'master' into es-modules-work (c04befb93)
- Issue #618 - Don't mute errors for module scripts because they always use CORS (073e914eb)
- Issue #618 - Integrity for descendant module scripts should be the empty string (c8a701b64)
- Issue #618 - Split handling of load errors out from OnStreamComplete. (090a48738)
- Issue #618 - Split SRI verification out from OnStreamComplete. (cbbfd0f2d)
- Issue #618 - Handle errors for inline module scripts and ensure we update the module map after fetch errors. (f0175ebc7)
- Update old.configure for --enable-phoenix-extensions (f909e1a6c)
- Issue #618 - Fix processing of non-parser-generated module scripts. (76e5f863a)
- Issue #618 - Make document.currentScript null in modules. (c5ab17748)
- Issue #618 - Rename some script load request flags to be more descriptive. (a0ef1c07d)
- Issue #618 - (async) Split out function to add async request. (95e0f114e)
- Issue #618 - (async, preload) Correctly pass info about async/defer to parser. (2ca1cbe2f)
- Issue #618 - (async) Keep track of script modes in a single mode state. (8b397a63a)
- Issue #618 - (async) Implement async attribute for inline module scripts. (b78f53ffb)
- Issue #618 - Don't preload nomodule scripts when modules are enabled (38d13e277)
- Issue #618 - Regenerate the HTML Parser code for nomodule changes (0f433fc7c)
- Merge pull request #1637 from g4jc/618 (8924e4ddd)
- Merge branch 'es-modules-work' (6eb0dd861)
- [media] Only include source error details in debugging scenarios. (4358ff62a)
- [DOM] Only construct JS-implemented objects if inner window is current. (226fea386)
- [misc/mar] Don't use a signed type for a length parameter. (7407fe22f)
- Issue #1587 followup - Improve resilience of AbortSignals. (5559674be)

No official Basilisk changes since my last build.

Official Pale-Moon changes since my last build:
- Update back-end branch pointer (202766dec)
- Add a configure option for Phoenix Extensions Dual-GUID System and set default off in confvars (f7a1deb67)
- Update platform and version (Unstable 2020-08-27) (0882134ff)

---

New build of BOC/UXP for XP!

Test binary:
MailNews Win32 https://o.rths.ml/boc-uxp/mailnews.win32-20200829-cbe6b975-uxp-5559674be-xpmod.7z
BNavigator Win32 https://o.rths.ml/boc-uxp/bnavigator.win32-20200829-cbe6b975-uxp-5559674be-xpmod.7z

source repo (excluding UXP): https://github.com/roytam1/boc-uxp/tree/custom

* Notice: the profile prefix (i.e. parent folder names) are also changed since 2020-08-15 build, you may rename their names before using new binaries when updating from builds before 2020-08-15.

--

New build of HBL-UXP for XP!

Test binary:
IceDove-UXP(mail) https://o.rths.ml/hbl-uxp/icedove.win32-20200829-id-eed056673-uxp-5559674be-xpmod.7z
IceApe-UXP(suite) https://o.rths.ml/hbl-uxp/iceape.win32-20200829-id-eed056673-ia-41157bf-uxp-5559674be-xpmod.7z

for UXP changes please see above.

---

New build of post-deprecated Serpent/moebius for XP!
* Notice: This repo will not be built on regular schedule, and changes are experimental as usual.
** Current moebius patch level should be on par with 52.9, but some security patches can not be applied/ported due to source milestone differences between versions.

Test binary:
Win32 http://o.rths.ml/basilisk/basilisk55-win32-git-20200829-60967aadd-xpmod.7z
Win64 http://o.rths.ml/basilisk/basilisk55-win64-git-20200829-60967aadd-xpmod.7z

repo: https://github.com/roytam1/basilisk55

Repo changes:
- import changes from tenfourfox:
 - #616: M1658214 M1637745 M1648372 (5ec6460ef)
 - #616: update TLDs, HSTS (f25d7f7a7) (60967aadd)

Changes that is not commited:
- WIP freebl works on Camellia-GCM support
- pref changes for disabling Camellia-GCM for release since it is not functional

---

New build of Firefox 45ESR:

Test binary:
SSE https://o.rths.ml/gpc/files1.rt/firefox-45.9.27-20200829-02603aac7-win32-sse.7z
IA32 https://o.rths.ml/gpc/files1.rt/firefox-45.9.27-20200829-02603aac7-win32-ia32.7z

repo: https://github.com/roytam1/mozilla45esr

Changes since my last build:
- bump version to 45.9.27 (f05c0876b)
- import changes from tenfourfox:
 - #616: M1658214 M1637745 M1648372 (5ec6460ef)
 - #616: update TLDs, HSTS (f25d7f7a7) (02603aac7)

---

New NewMoon 27 Build!

32bit https://o.rths.ml/palemoon/palemoon-27.9.7.win32-git-20200829-a7bc0406e-xpmod.7z
32bit SSE https://o.rths.ml/palemoon/palemoon-27.9.7.win32-git-20200829-a7bc0406e-xpmod-sse.7z
32bit noSSE https://o.rths.ml/palemoon/palemoon-27.9.7.win32-git-20200829-a7bc0406e-xpmod-ia32.7z

64bit https://o.rths.ml/palemoon/palemoon-27.9.7.win64-git-20200829-a7bc0406e-xpmod.7z

source repo: https://github.com/roytam1/palemoon27

repo changes since my last build:
- fix typo in rev 18084d9c (4f739a48e)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1153148 - Add documentation comment for JSOP_SUPERBASE and JSOP_INITHOMEOBJECT. r=efaust (b6ecd21e1)
 - Bug 1153057 - Properly initialize the [[HomeObject]] of methods with computed property names. (r=jorendorff) (6c2226674)
 - Bug 1152304 - Record the end of block scope notes to be after emission of JSOP_POPBLOCKSCOPE. (r=jimb) (295502f81)
 - Pointer style (7f3f22ce3)
 - Bug 1155466 - Freshened blocks should pop their old blocks in debug scopes. (r=Waldo) (359fff80b)
 - pointer style (107fb5b95)
 - Bug 1156190 - Do not emit DEBUGLEAVESCOPE if we're also going to emit POPBLOCKSCOPE. (r=jimb) (af5fde7ef)
 - cleanup (292b5baa7)
 - do not inline (cc14b6170)
 - pointer style (637cc4e01)
 - pointer style (e203a150f)
 - Bug 1149498 - Watch for preliminary object groups in more places, r=jandem. (a623a2d06)
 - Bug 1155946 part 1 - Add a mayResolve class hook to optimize objects with resolve hooks better. r=bhackett (e45ebda33)
 - Bug 1155946 part 2. Add mayResolve methods to DOM classes with resolve hooks. r=peterv (9efb0c070)
 - pointer style (d0c09e4ec)
 - Bug 1149119 - Use Atoms in the template object hold by Baseline. r=jandem (63fe170e9)
 - Bug 1149119 - Do not inline bound functions with non-atomized arguments. r=jandem (facc9cb06)
 - Bug 1155807 - Watch for converted native groups with unknown properties, r=jandem. (257e11ff3)
 - Bug 1136584 - Fix warning-as-errors error. r=me (11768280a)
 - pointer style (f2234b36f)
 - Bug 1157809 - Optimizing scanning of unboxed plain objects and typed objects during nursery collections, r=terrence. (f37855a60)
 - Bug 1153266 - Allow turning on unboxed objects with an environment variable, r=h4writer. (504984da7)
 - Bug 1145426 - Fix compilation of unboxed object construction stubs on ARM and x86, r=jandem. (be1491b56)
 - Bug 1145795 - Remove LJSCallInstructionHelper::numStackArgs() footgun. (r=jandem) (c3e952856)
 - Bug 1147629 - Use getStackPointer() and helper functions. r=jandem (97d6b4054)
 - Bug 1147608 - Fixes for unboxed object creation stub compilation on x86 and ARM, r=jandem. (abc526773)
 - Bug 1146363: Inline SIMD.int32x4.bool; r=sunfish (d655dc72e)
 - Bug 1155793 part 1. Make it possible to safely change the number of bits in the slotIndex field in jitinfo. r=efaust (c6124396d)
 - Bug 1155793 part 2. Split apart the concepts of movability and eliminatability in jitinfo, since some things are not movable but are eliminatable. r=efaust (848b751b8)
 - Bug 1135040: Optimize SIMD shifts in Ion; r=nbp (a61b8ae26)
 - pointer style (b9921d90f)
 - rearrange (38c9a7c33)
 - Bug 1142668: Fix int32x4 to float32x4 conversions in the JIT; r=sunfish (6f3ac7a59)
 - pointer style (29df6bf54)
 - pointer style (bebd7f1d6)
 - Bug 1134198 - Refactor JS_GENERATOR_CLOSED checking. (r=jandem) (55c3062dd)
 - Bug 1134198 - Rename assertNotInFrameMaps to inFrameMaps. (r=tromey) (e8a8ecfff)
 - Bug 1134198 - Update tests to reflect new specced behavior on Debugger.Frame.onPop. (r=tromey) (8126f8ecf)
 - Bug 1134198 - Update docs for new Debugger.Frame.onPop spec. (r=tromey) (7520665c1)
 - Bug 1134198 - Fix up tests now that onPop and onExceptionUnwind may be called at different locations than previously. (r=tromey) (6651e74b7)
 - Bug 1134198 - Don't call Debugger::slowPathOnLeaveFrame on frames no longer in Debugger frame maps. (r=jimb) (a8856ece8)
 - Bug 1134198 - Call Debugger::onPop at the point that caused the frame to pop before any unwinding in the interpreter. (r=jimb) (84a4f3f70)
 - pointer style and cleanup (5bc4c3114)
 - no bug - fix windows includes for case sensitive file systems (48835fd8b)
 - pointer style (ef70bfbcb)
 - pointer style (f739ba488)
 - pointer style (1cc9808f8)
 - Bug 1146597 - Add unboxed arrays for JSOP_NEWARRAY arrays, and shell option for using them, r=jandem. (d7b424fc3)
 - pointer style (5877eb088)
 - Bug 1157703 - Cache iterators involving unboxed objects, r=jandem. (f2670a817)
 - pointer style (bfbb868b7)
 - Bug 1146597 - Remove redundant check for unboxed object/array runtime option. (3b533c202)
 - Pointer style (1984bb1e8)
 - pointer style (6fbaea70a)
 - Bug 1142828 - Refactor to avoid having [[Set]]-specific weird cases in the [[DefineOwnProperty]] code. r=Waldo. (4661cdecb)
 - Bug 1147660, part 1 - Refactor NativeDefineProperty to put DefinePropertyOrElement's only call site right at the end. No change in behavior. r=efaust. (824cb5e2b)
 - Bug 1147660, part 2 - Merge DefinePropertyOrElement into NativeDefineProperty, making one long function we can refactor. r=efaust. (89a6bf7e0)
 - Bug 1147660, part 3 - Rearrange NativeDefineProperty so that special cases are all dispensed with, and ES6 checks done, by the time we start thinking about how to update the object. r=efaust. (b0234d161)
 - Bug 1147660, part 4 - Change NativeDefineProperty to use a PropertyDescriptor internally instead of a bunch of variables. This is a little ugly at first but it'll get better. r=efaust. (1c1999a57)
 - Bug 1147660, part 5 - Split the part of NativeDefineProperty that updates the object into a separate function again. r=efaust. (5dc0316b5)
 - pointer style (f66459369)
 - Bug 1148652, part 1 - Move array-specific special cases to the top of NativeDefineProperty; update ArraySetLength to be able to cope with incomplete attrs. r=efaust. (e2dca6628)
 - Bug 1148652, part 2 - Use mostly-compliant code for defining TypedArray elements, already used from StandardDefineProperty, in NativeDefineProperty as well. r=efaust. (b5e8489ed)
 - Bug 1148652, part 3 - Mark arguments.length as overridden when it is redefined via the C API. r=efaust. (0f44925f1)
 - Bug 1148750, part 1 - Factor out the lookup common to three branches at the top of NativeDefineProperty. r=efaust. (b9e4e7254)
 - Bug 1148750, part 2 - Check extensibility in NativeDefineProperty. r=efaust. (202f4e12e)
 - Bug 1148750, part 3 - Implement ValidateAndApplyPropertyDescriptor step 2. r=efaust. (acb6afa35)
 - Bug 1148750, part 4 - Strip out redundant if-conditions in parts of NativeDefineProperty where shape can't be null. r=efaust. (15d24b5f4)
 - Bug 1148750, part 5 - CompletePropertyDescriptor upgrade. r=efaust. (69bd74ce3)
 - Bug 1148750, part 6 - Implement ValidateAndApplyPropertyDescriptor up to step 5. r=efaust. (94aef08b5)
 - Bug 1148750, part 7 - Fill in configurable and enumerable. r=efaust. (698bfa16d)
 - Bug 1148750, part 8 - Implement ValidateAndApplyPropertyDescriptor step 6. r=efaust. (7459d31ba)
 - Bug 1148750, part 9 - Implement ValidateAndApplyPropertyDescriptor step 7. r=efaust. (9593b3312)
 - Bug 1148750, part 10 - js::NativeDefineProperty: Swap the order of the cases in the remaining old code. r=efaust. (90a61b163)
 - Bug 1148750, part 11 - Remove some code for TypedArray cases rendered unreachable by part 1 of this bug. r=efaust. (d57f75b20)
 - Bug 1148750, part 12 - Reject redefinition of non-writable non-configurable data property as writable. This fixes bug 1073808. r=efaust. (d1783a786)
 - Bug 1148750, part 13 - Simplify code to fill in desc.writable, if not present, from the existing shape. r=efaust. (aa01780a6)
 - Bug 895223 - Use JSNative instead of JSGetterOp for ctypes FieldGetter/Setter. r=jorendorff (01372b866)
 - Bug 895223 - Always pass the holder to JSGetterOps. r=jorendorff,jandem (62bff004b)
 - Bug 895223 - Test for the now correctly behaving properties (e.g array.length). r=jorendorff (5238a0c44)
 - Bug 1153651 - Define array.length as JSPROP_SHADOWABLE. r=jorendorff (6645ed732)
 - Bug 1149563 - Change bogus ctypes code that modifies a frozen object. r=efaust. (1777ad24d)
 - Bug 1148750, part 14 - Reject redefining a non-writable non-configurable data property to have a different value. r=efaust. (a2e81df42)
 - Bug 1148750, part 15 - Stop retaining getter and setter ops when redefining a data property. r=efaust. (1c6f67821)
 - Bug 1148750, part 16 - Implement ValidateAndApplyPropertyDescriptor step 9 (redefining an existing accessor property). Remove CheckAccessorRedefinition. r=efaust. (0affd1437)
 - pointer style (0697799b8)
 - Bug 1153475 - Always ignore desc.object() in DefineProperty functions that take a PropertyDescriptor argument. r=efaust. (d9615554e)
 - pointer style (f883227a9)
 - Bug 1147005 - Change JSAddPropertyOp signature. r=jorendorff,peterv (83530a9b4)
 - Bug 1125567 - Remove FindClassPrototype/FindClassObject. r=jorendorff (f89fd6b99)
 - Bug 1125302 - Remove NativeLookupProperty. r=luke (b6dc7bac8)
 - Bug 1062473: Add 'const' qualifiers to this for some NativeObject methods and free functions. r=terrence (7e4cc56cd)
 - Bug 1062473: Add 'pointer-byte-size' to getBuildConfiguration results. r=sfink (93edbaca6)
 - pointer style (ff234eb8b)
 - Bug 1155197: For JS::ubi::Node, provide jsObjectClassName directly in JSObject specialization. r=terrence (9151ceb5f)
 - Bug 1062473: Make JSObject::allocKindForTenure out of GetObjectAllocKindForCopy. r=terrence (9575ad90e)
 - Bug 1062473: Implement JS::ubi::Node::size for JSObjects. r=sfink,terrence (aeacda1ca)
 - Bug 1160986 - Update Histograms.json for RegExp#source access (followup for bug 1153963). r=gfritzsche (9defab499)
 -  Bug 1154296 - Small GetOwnPropertyDescriptor cleanup. r=jorendorff (fef8fb35e)
 - Bug 1134865 - Part 1: Add JSObject::constructorDisplayAtom; r=djvj (db97321c4)
 - pointer style (f237fad9c)
 - Bug 1154079 - Add the allocated object's [[class]] name to the allocations log. r=shu (d5bab15fa)
 - Bug 1134865 - Part 2: Add constructor name to the allocations log; r=djvj (c11125323)
 - Bug 1063257: Implement JS::ubi::Node::size for JSString. r=sfink (491b25b28)
 - Bug 1134865 - Part 3: Add JS::ubi::Node::jsObjectConstructorName; r=djvj (dd74ed300)
 - Bug 1158463 - Reorder property creation in js::FromPropertyDescriptorToObject. r=Waldo (afb9f302d)
 - Bug 1161077 - Allocate unboxed arrays in the nursery, r=terrence. (df198da45)
 - Bug 1159806 - Replace macro assertions with inline functions; r=sfink (c493b7a83)
 - Bug 1161353 - Remove the post-barrier verifier; r=sfink (3c64f8b44)
 - pointer style (0f1785941)
 - Bug 1148921 - Check correctness of hash table modifications later on during minor GCs, r=jonco. (6f8cf20b0)
 - Bug 1158569 - Don't trigger sweeping of dead type information when scanning unboxed objects in minor GCs, r=terrence. (7d5c9d20d)
 - Bug 1161726 - Use a custom tracer for tenuring to avoid the indirect calls; r=jonco (f2088e2ae)
 - Bug 1161353 - Follow-up to remove more post-barrier verifier cruft; r=terrence (903a81bd5)
 - Bug 1160887 - Fix various unboxed object bugs, r=jandem,terrence. (a7aca9fc9)
 - Bug 1161762 - Fix test used for whether an unboxed object layout is too large, r=jandem. (772157822)
 - Bug 1161346 - Add missing capacity for unboxed arrays, r=jandem. (9810cbf73)
 - Bug 1163810 - Use type-based dispatch for IncrementalReferenceBarrier; r=jonco (caf1273bd)
 - Bug 1162301 - Move tenuring implementation to TenuringTracer; r=sfink (5e51a3341)
 - Bug 1162303 - Simplify TenuringTracer's implementation; r=jonco (813446aa1)
 - fix order (15279b7ed)
 - Bug 1163643 - Fix unified build errors following recent marking changes r=terrence (83fe5b47a)
 - Bug 1161664 - Stay inline when visiting the WholeObject store buffer; r=sfink (d5efe7867)
 - Bug 1112627: Implement shift count saturation; r=Waldo (4f82dcabd)
 - Bug 1112627: Remove redundant inline specifier in SIMD operators impl; r=Waldo (0e6f1a31b)
 - Bug 1063946 SIMD: Group tests in logical units - conversions; r=bbouvier (35930b52c)
 - Bug 1155081 - Part 12: Replace ThrowError(JSMSG_TYPEDOBJECT_ARRAYTYPE_BAD_ARGS) with ThrowTypeError(JSMSG_TYPEDOBJECT_BAD_ARGS) in TypedObject.js. r=till (01152b406)
 - Bug 1155081 - Part 1: Replace ThrowError with ThrowTypeError in Array.js. r=till (002a1f3b9)
 - Bug 1155081 - Part 2: Replace ThrowError with ThrowTypeError in Error.js. r=till (4a76cc576)
 - Bug 1155081 - Part 3: Replace ThrowError with ThrowTypeError in Generator.js. r=till (08f8d6ae1)
 - Bug 1155081 - Part 4: Replace ThrowError with ThrowTypeError/ThrowRangeError in Intl.js. r=till (978326c2d)
 - Bug 1155081 - Part 5: Replace ThrowError with ThrowTypeError in Map.j…s/Set.js/WeakSet.js. r=till (217998d56)
 - Bug 1155081 - Part 6: Replace ThrowError with ThrowTypeError in Object.js. r=till (1c0e15e13)
 - Bug 1155081 - Part 7: Replace ThrowError with ThrowTypeError in RegExp.js. r=till (d23d58be8)
 - Bug 1155081 - Part 8: Replace ThrowError with ThrowTypeError/ThrowRangeError in String.js. r=till (c80fa9060)
 -  Bug 1155081 - Part 9: Replace ThrowError with ThrowTypeError in TypedArray.js. r=till (8311344de)
 - Bug 1155081 - Part 10: Replace ThrowError for TypeError with ThrowTypeError in TypedObject.js. r=till (44cee08bb)
 - Bug 1145058 - Annotate the SpeciesConstructor utility function with step-by-step comment numbering to make clear where we do (and do not!) follow the spec. Also fix issues related to our half-pretense of implementing this method without having first implemented the well-known @@species symbol. r=efaust (c0c60afe1)
 - Bug 1154532 - Add ThrowRangeError and ThrowTypeError intrinsics to make self-hosted code's behavior clearer -- and also have each assert that error number and requested error type are consistent. (It appears no self-hosted code throws SyntaxError, ReferenceError, or URIError yet, so no adding functions for those yet.) r=till (12b2f552f)
 - Bug 1155081 - Part 11: Replace ThrowError with ThrowTypeError in Utilities.js. r=till (b06c0c6d9)
 - Bug 1154542 - Remove a few unused error messages. r=till (f0248f8cd)
 - Bug 1147214 - Allow app: urls to use sw. r=baku (e3e1c02f5)
 - Bug 1099149 - Part 2: Add a more specific error message when 'js::ToSimdConstant' argument is of wrong type. r=bbouvier (3281bf2d6)
 - Bug 1161628 - Fix leak in ErrorWrongTypeArg. r=bbouvier (7e9c0f5f9)
 - Bug 1146718 - Split the 'J' tag in the profiler into 'J' (JIT frames without opt info) and 'O' (with opt info). (r=djvj) (d5ab6dff8)
 - Bug 1137569 - Stream and save samples and markers in the profiler on JSRuntime destruction. (r=mstange) (b1a6b9a7f)
 - Pointer style (67b999b2b)
 - Bug 1137569 - Delay stringification of JIT frames until streaming time. (r=djvj) (78d743512)
 - pointer style (716a0f543)
 - Bug 1140180 - Stop leaking TypeLists when tracking optimizations. (r=djvj) (cda2fe426)
 - Bug 1147224 - Only keep the optimization information of the last time IonBuilder visits a bytecode location. (r=djvj) (ad93a60b3)
 - pointer style (d29b2ac28)
 - Bug 1150714 - Fix streaming tracked optimizations for functions that don't have a displayAtom. (r=djvj) (c38845397)
 - pointer style (073a0adf4)
 - Bug 1150714 - Mark and sweep JitcodeGlobalMap IC entries. (r=djvj) (e9fe3dc34) (245bcf2f6)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1155006: Fix unified build sensitivities in js/src/jit. r=shu (6e24e1af1)
 - Bug 1162766 - Fix more bad implicit constructors in js. r=evilpie (39961b06d)
 - Bug 1151606 - Stream atoms instead of raw pointers for native functions in tracked optimizations. (r=djvj) (7641ee9d6)
 - pointer style (540728104)
 - Bug 1154997 - Deal with self-hosted builtins when stringifying tracked optimization type info. (r=djvj) (92f9a54e6)
 - pointer style (45742d820)
 - Bug 1154115 - Rewrite the JSAPI profiling API to use a FrameHandle, as to avoid multiple lookups in JitcodeGlobalTable. (r=djvj) (4d202ba9e)
 - Bug 1119023 - Timeline in new perf tool should filter out markers, r=jsantell (6fc1a8bbe)
 - Bug 1132755 - Allocations tree has a bunch of columns that don't make sense, r=jsantell (1ae9ee7e2)
 - Bug 1142744 - Fix tests broken by bug 1132755, r=me (cc495f72d)
 - Bug 1133058 - OptionsView button, when clicked, should have an 'open' attribute. r=vp (65a78d896)
 - Bug 1132765 - Pass through performance memory options for 'probability' and 'maxLogLength' from the front to the memory actor. r=vp (f9bbbe098)
 - Bug 1141817 - Fix yield statement to correctly return memory actor state so that the performance tool can poll for allocations during recording. r=vp (2ddf7d528)
 - Bug 1141817 - Followup to fix additional intermittents like bug 1132370, r=vp (eab962f01)
 - Bug 1142748 - Use a single configuration for starting/stopping recordings, r=jsantell (0181b319a)
 - bit of Bug 879008 - New UI for the sampling Profiler (32c4d0fe8)
 - Bug 1123815 - Merge gum into fx-team to enable the Performance++ tool, r=me (84aabbd61)
 - Bug 1143933 - Expose raw JIT optimization information in performance front end. r=vp,shu (f68a6df50)
 - Bug 1143915 - Allow multiple calls to memory and timeline actor's start methods, to return the local start time from the actor. r=vp (028ac4187)
 - Bug 978948 - Add animation generator support for setTimeout in the canvas debugger. r=vp (42d623452)
 - Bug 985488 - Allow canvas debugger to time out and stop recording frames. Canvas debugger 'wait' style now matches other media styles. Update labels in canvas debugger to explicitly state that it's waiting for rAF cycles, rather than appearing as if something went wrong. r=vporof (b4670d843)
 - Bug 1144163 - Add a rulers highlighter; added unit test. r=pbrosset (5811a67d0)
 - Bug 1144163 - Add a rulers highlighter; added highlighter. r=pbrosset (779f88bdd)
 - Bug 1144163 - Add a rulers highlighter; added gcli command and button. r=pbrosset (d0d13da51)
 - Bug 1110550 - Enable performance overview graphs to rerender and change on devtools theme switch. r=vp (bd91ca7cf)
 - Bug 1149630 - Performance graphs should inherit from a common graph and be similarly styled. r=vporof (481c841f1)
 - Bug 1150733 - Correctly internationalize jit samples label. r=vporof, r=flod (b5612d1a6)
 - Bug 1137518 - FlameGraph's destroy function should be async, r=jsantell (f103e4c15)
 - Bug 1137503 - Avoid potential infinite loops in `findOptimalTickInterval` functions, r=jsantell (95df6c04a)
 - Bug 1121194 - Support vertical panning for the flamegraph in the new performance tool, r=jsantell (06241b5b2)
 - Bug 1121180 - Support dark theme in flamecharts for the performance tool. r=vp (c76abe237)
 -  Bug 1059308 - Add Target.isTabActor to tell if the remote tab actor supports attach/detach requests. r=jryans (e03dcef93)
 - Bug 1132370 - Wrong State: Expected 'attached', but current state is 'detached', r=jsantell (e884e8db9)
 - No Bug - Fix documentation for _startMemory and _stopMemory in performance/modules/front.js, r=me DONTBUILD (d79090b31)
 - Bug 1147656 - Remove duplicate profiler defaults from the front end and just use on the server. r=vp (35c015dd0)
 - Bug 1046234 - Add more DevTools Telemetry measures (display size etc) r=pbrosset, r=gijs (a235681b4)
 - actually package telemetry.js (e8f3a58a4)
 - Bug 1077464 - Wire console.profile/profileEnd to the new performance tool. Move most of the recording-model logic from the front end into the PerformanceFront and PerformanceActorConnection so it can manage recordings without the front end being viewed. r=vp,jryans,pbrosset (eef8e18c3)
 - Bug 1144363 - Fix this._telemetry is undefined in gDevTools. r=bgrins (ba7d02902)
 - init telemetry, missing parts of Bug 866642 (1e70df975)
 - do not use sysctl.h on Linux anymore, since it is not provided by recent glibc (b2467d7ce)
 - clean up some telemetry issues of histogram, parts of  Bug 974171 (d30c8d0ad)
 - move devtools to browser - part 1 (9a856f452)
 - Bug 1291423: Explicitly qualify the destructor call that we invoke in Maybe::reset. r=Waldo (944904a7d)
 - Bug 1148075 - Dynamically add XUL commands for the debugger frontend. r=vporof (60bc91f8f)
 - Bug 1147945 - Let the profiler's buffer size and sample rate be configurable via prefs. r=vp (acebcbdd9)
 - Bug 1124326 - Improve packageDir support for Cordova. r=ochameau (4b736580a)
 - Bug 1124326 - Support Cordova w/o build file. r=ochameau (d4b50aeae)
 - Bug 1134029 - Fix 'Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIURI.host]' timeouts, r=jsantell (18d16a5d0)
 - Bug 1147806 - Content frame filtering is confused when profiling FxOS, r=jsantell (b3c62c552)
 - Bug 1108843 - Generalize platform data in call tree view when platform data is hidden. r=vporof (354553ed7)
 - Bug 1138928 - Display only function name and file, instead of full url, in flame graphs. r=vp (4169689c1)
 - Bug 1152605 - Should not show host names for chrome URIs. r=vporof (c6dcf9e78)
 - Bug 1147604 - Inverted call trees should list (root) as leaves. r=jsantell (01768267f)
 - Bug 1075450 - Disable some Awesomebar actions for private windows r=mak (21d5586e7)
 - Bug 1120616 - Part 1: Implement filter styles in rule view r=bgrins (b66ee0282)
 - Bug 1120616 - Part 2: Add unit tests for filter styles in rule view r=bgrins (2892503d8)
 - Bug 1120616 - Part 3: Adjust the styles in the computed view's filter style search r=bgrins (41f8fae1b)
 - Bug 1120616 - Part 4: Add textbox context menu for rule and computed view r=bgrins (ff3f868ad)
 - Bug 1120616 - Part 5: Refactor style inspector tests to use synthesizeKeys r=bgrins (41db021d7)
 - Bug 1102219 - Part 5: Replace more `String.prototype.contains` with `String.prototype.includes` in chrome code. r=till (86ed03588)
 - Bug 1154018 - Check to see that nsIURI's host exists when parsing location for framenodes, and cache failures. r=vp (9494d52e7)
 - Bug 1160691 - Optimize FrameUtils.isContent and FrameUtils.parseLocation. (r=jsantell) (09118fd5d)
 - Bug 1154115 - Make the performance devtool handle the new profiler JSON format. (r=jsantell,vporof) (e3e5be7a4)
 - Bug 1059308 - Make frame selection button to work in browser toolbox. r=jryans,past (30fe6e61e)
 - Bug 1059308 - Fix tests to support chrome actor. r=jryans (01cf3926c)
 - Bug 1147042 - Rename attachProcess to getProcess. r=ochameau (0393ffb80)
 - Bug 1145824 - Profiler actor and performance tools now handle passing in a startTime to filter out SPS profiles on platform rather than client. r=vp,fitzgen (f225116ba)
 - Bug 1157718 - Do not use Array.prototype.includes in production code that leaves nightly in performance tool. r=fitzgen (ff06d284e)
 - Bug 1140728 - Rename 'Memory' to 'Allocations' in the new performance tool. r=jsantell (f584e720f)
 - Bug 1137500 - Always wait for the overview to be rendered in tests after a recording finishes, unless otherwise specified, r=jsantell (59825e179)
 - Bug 1137487 - AbstractCanvasGraph's destroy function should be async, r=jsantell (a17ae00b5)
 - Bug 1132758 - Performance feature visibility now based on a per recording-basis, dependent on features enabled and server support. r=vp (0d080a7c2)
 - Bug 1147035 - Make DeveloperToolbar.jsm use the gBrowser.contentDocumentAsCPOW shortcut. r=past. (251eff125)
 - Bug 1151168 - Don't flush profiled threads that are pending deletion on JS shutdown and don't delete expired markers when resetting the profile buffer. (r=djvj) (90721313a) (a7bc0406e)

---

New regular/weekly KM-Goanna release:
https://o.rths.ml/kmeleon/KM76.3-Goanna-20200830.7z

Changelog:

In-tree changes:
- bump KM version for API change (310f407a)
- add KmAppInfo::GetIs64Bit() to match new XULRunner API from goann3 rev a7bc0406ee460ad17edc80d7d16a8293922e89b9 (b124b4f6)

Out-of-tree changes:
* update Goanna3 to git 346d6556f..a7bc0406e:
- fix typo in rev 18084d9c (4f739a48e)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1153148 - Add documentation comment for JSOP_SUPERBASE and JSOP_INITHOMEOBJECT. r=efaust (b6ecd21e1)
 - Bug 1153057 - Properly initialize the [[HomeObject]] of methods with computed property names. (r=jorendorff) (6c2226674)
 - Bug 1152304 - Record the end of block scope notes to be after emission of JSOP_POPBLOCKSCOPE. (r=jimb) (295502f81)
 - Pointer style (7f3f22ce3)
 - Bug 1155466 - Freshened blocks should pop their old blocks in debug scopes. (r=Waldo) (359fff80b)
 - pointer style (107fb5b95)
 - Bug 1156190 - Do not emit DEBUGLEAVESCOPE if we're also going to emit POPBLOCKSCOPE. (r=jimb) (af5fde7ef)
 - cleanup (292b5baa7)
 - do not inline (cc14b6170)
 - pointer style (637cc4e01)
 - pointer style (e203a150f)
 - Bug 1149498 - Watch for preliminary object groups in more places, r=jandem. (a623a2d06)
 - Bug 1155946 part 1 - Add a mayResolve class hook to optimize objects with resolve hooks better. r=bhackett (e45ebda33)
 - Bug 1155946 part 2. Add mayResolve methods to DOM classes with resolve hooks. r=peterv (9efb0c070)
 - pointer style (d0c09e4ec)
 - Bug 1149119 - Use Atoms in the template object hold by Baseline. r=jandem (63fe170e9)
 - Bug 1149119 - Do not inline bound functions with non-atomized arguments. r=jandem (facc9cb06)
 - Bug 1155807 - Watch for converted native groups with unknown properties, r=jandem. (257e11ff3)
 - Bug 1136584 - Fix warning-as-errors error. r=me (11768280a)
 - pointer style (f2234b36f)
 - Bug 1157809 - Optimizing scanning of unboxed plain objects and typed objects during nursery collections, r=terrence. (f37855a60)
 - Bug 1153266 - Allow turning on unboxed objects with an environment variable, r=h4writer. (504984da7)
 - Bug 1145426 - Fix compilation of unboxed object construction stubs on ARM and x86, r=jandem. (be1491b56)
 - Bug 1145795 - Remove LJSCallInstructionHelper::numStackArgs() footgun. (r=jandem) (c3e952856)
 - Bug 1147629 - Use getStackPointer() and helper functions. r=jandem (97d6b4054)
 - Bug 1147608 - Fixes for unboxed object creation stub compilation on x86 and ARM, r=jandem. (abc526773)
 - Bug 1146363: Inline SIMD.int32x4.bool; r=sunfish (d655dc72e)
 - Bug 1155793 part 1. Make it possible to safely change the number of bits in the slotIndex field in jitinfo. r=efaust (c6124396d)
 - Bug 1155793 part 2. Split apart the concepts of movability and eliminatability in jitinfo, since some things are not movable but are eliminatable. r=efaust (848b751b8)
 - Bug 1135040: Optimize SIMD shifts in Ion; r=nbp (a61b8ae26)
 - pointer style (b9921d90f)
 - rearrange (38c9a7c33)
 - Bug 1142668: Fix int32x4 to float32x4 conversions in the JIT; r=sunfish (6f3ac7a59)
 - pointer style (29df6bf54)
 - pointer style (bebd7f1d6)
 - Bug 1134198 - Refactor JS_GENERATOR_CLOSED checking. (r=jandem) (55c3062dd)
 - Bug 1134198 - Rename assertNotInFrameMaps to inFrameMaps. (r=tromey) (e8a8ecfff)
 - Bug 1134198 - Update tests to reflect new specced behavior on Debugger.Frame.onPop. (r=tromey) (8126f8ecf)
 - Bug 1134198 - Update docs for new Debugger.Frame.onPop spec. (r=tromey) (7520665c1)
 - Bug 1134198 - Fix up tests now that onPop and onExceptionUnwind may be called at different locations than previously. (r=tromey) (6651e74b7)
 - Bug 1134198 - Don't call Debugger::slowPathOnLeaveFrame on frames no longer in Debugger frame maps. (r=jimb) (a8856ece8)
 - Bug 1134198 - Call Debugger::onPop at the point that caused the frame to pop before any unwinding in the interpreter. (r=jimb) (84a4f3f70)
 - pointer style and cleanup (5bc4c3114)
 - no bug - fix windows includes for case sensitive file systems (48835fd8b)
 - pointer style (ef70bfbcb)
 - pointer style (f739ba488)
 - pointer style (1cc9808f8)
 - Bug 1146597 - Add unboxed arrays for JSOP_NEWARRAY arrays, and shell option for using them, r=jandem. (d7b424fc3)
 - pointer style (5877eb088)
 - Bug 1157703 - Cache iterators involving unboxed objects, r=jandem. (f2670a817)
 - pointer style (bfbb868b7)
 - Bug 1146597 - Remove redundant check for unboxed object/array runtime option. (3b533c202)
 - Pointer style (1984bb1e8)
 - pointer style (6fbaea70a)
 - Bug 1142828 - Refactor to avoid having [[Set]]-specific weird cases in the [[DefineOwnProperty]] code. r=Waldo. (4661cdecb)
 - Bug 1147660, part 1 - Refactor NativeDefineProperty to put DefinePropertyOrElement's only call site right at the end. No change in behavior. r=efaust. (824cb5e2b)
 - Bug 1147660, part 2 - Merge DefinePropertyOrElement into NativeDefineProperty, making one long function we can refactor. r=efaust. (89a6bf7e0)
 - Bug 1147660, part 3 - Rearrange NativeDefineProperty so that special cases are all dispensed with, and ES6 checks done, by the time we start thinking about how to update the object. r=efaust. (b0234d161)
 - Bug 1147660, part 4 - Change NativeDefineProperty to use a PropertyDescriptor internally instead of a bunch of variables. This is a little ugly at first but it'll get better. r=efaust. (1c1999a57)
 - Bug 1147660, part 5 - Split the part of NativeDefineProperty that updates the object into a separate function again. r=efaust. (5dc0316b5)
 - pointer style (f66459369)
 - Bug 1148652, part 1 - Move array-specific special cases to the top of NativeDefineProperty; update ArraySetLength to be able to cope with incomplete attrs. r=efaust. (e2dca6628)
 - Bug 1148652, part 2 - Use mostly-compliant code for defining TypedArray elements, already used from StandardDefineProperty, in NativeDefineProperty as well. r=efaust. (b5e8489ed)
 - Bug 1148652, part 3 - Mark arguments.length as overridden when it is redefined via the C API. r=efaust. (0f44925f1)
 - Bug 1148750, part 1 - Factor out the lookup common to three branches at the top of NativeDefineProperty. r=efaust. (b9e4e7254)
 - Bug 1148750, part 2 - Check extensibility in NativeDefineProperty. r=efaust. (202f4e12e)
 - Bug 1148750, part 3 - Implement ValidateAndApplyPropertyDescriptor step 2. r=efaust. (acb6afa35)
 - Bug 1148750, part 4 - Strip out redundant if-conditions in parts of NativeDefineProperty where shape can't be null. r=efaust. (15d24b5f4)
 - Bug 1148750, part 5 - CompletePropertyDescriptor upgrade. r=efaust. (69bd74ce3)
 - Bug 1148750, part 6 - Implement ValidateAndApplyPropertyDescriptor up to step 5. r=efaust. (94aef08b5)
 - Bug 1148750, part 7 - Fill in configurable and enumerable. r=efaust. (698bfa16d)
 - Bug 1148750, part 8 - Implement ValidateAndApplyPropertyDescriptor step 6. r=efaust. (7459d31ba)
 - Bug 1148750, part 9 - Implement ValidateAndApplyPropertyDescriptor step 7. r=efaust. (9593b3312)
 - Bug 1148750, part 10 - js::NativeDefineProperty: Swap the order of the cases in the remaining old code. r=efaust. (90a61b163)
 - Bug 1148750, part 11 - Remove some code for TypedArray cases rendered unreachable by part 1 of this bug. r=efaust. (d57f75b20)
 - Bug 1148750, part 12 - Reject redefinition of non-writable non-configurable data property as writable. This fixes bug 1073808. r=efaust. (d1783a786)
 - Bug 1148750, part 13 - Simplify code to fill in desc.writable, if not present, from the existing shape. r=efaust. (aa01780a6)
 - Bug 895223 - Use JSNative instead of JSGetterOp for ctypes FieldGetter/Setter. r=jorendorff (01372b866)
 - Bug 895223 - Always pass the holder to JSGetterOps. r=jorendorff,jandem (62bff004b)
 - Bug 895223 - Test for the now correctly behaving properties (e.g array.length). r=jorendorff (5238a0c44)
 - Bug 1153651 - Define array.length as JSPROP_SHADOWABLE. r=jorendorff (6645ed732)
 - Bug 1149563 - Change bogus ctypes code that modifies a frozen object. r=efaust. (1777ad24d)
 - Bug 1148750, part 14 - Reject redefining a non-writable non-configurable data property to have a different value. r=efaust. (a2e81df42)
 - Bug 1148750, part 15 - Stop retaining getter and setter ops when redefining a data property. r=efaust. (1c6f67821)
 - Bug 1148750, part 16 - Implement ValidateAndApplyPropertyDescriptor step 9 (redefining an existing accessor property). Remove CheckAccessorRedefinition. r=efaust. (0affd1437)
 - pointer style (0697799b8)
 - Bug 1153475 - Always ignore desc.object() in DefineProperty functions that take a PropertyDescriptor argument. r=efaust. (d9615554e)
 - pointer style (f883227a9)
 - Bug 1147005 - Change JSAddPropertyOp signature. r=jorendorff,peterv (83530a9b4)
 - Bug 1125567 - Remove FindClassPrototype/FindClassObject. r=jorendorff (f89fd6b99)
 - Bug 1125302 - Remove NativeLookupProperty. r=luke (b6dc7bac8)
 - Bug 1062473: Add 'const' qualifiers to this for some NativeObject methods and free functions. r=terrence (7e4cc56cd)
 - Bug 1062473: Add 'pointer-byte-size' to getBuildConfiguration results. r=sfink (93edbaca6)
 - pointer style (ff234eb8b)
 - Bug 1155197: For JS::ubi::Node, provide jsObjectClassName directly in JSObject specialization. r=terrence (9151ceb5f)
 - Bug 1062473: Make JSObject::allocKindForTenure out of GetObjectAllocKindForCopy. r=terrence (9575ad90e)
 - Bug 1062473: Implement JS::ubi::Node::size for JSObjects. r=sfink,terrence (aeacda1ca)
 - Bug 1160986 - Update Histograms.json for RegExp#source access (followup for bug 1153963). r=gfritzsche (9defab499)
 -  Bug 1154296 - Small GetOwnPropertyDescriptor cleanup. r=jorendorff (fef8fb35e)
 - Bug 1134865 - Part 1: Add JSObject::constructorDisplayAtom; r=djvj (db97321c4)
 - pointer style (f237fad9c)
 - Bug 1154079 - Add the allocated object's [[class]] name to the allocations log. r=shu (d5bab15fa)
 - Bug 1134865 - Part 2: Add constructor name to the allocations log; r=djvj (c11125323)
 - Bug 1063257: Implement JS::ubi::Node::size for JSString. r=sfink (491b25b28)
 - Bug 1134865 - Part 3: Add JS::ubi::Node::jsObjectConstructorName; r=djvj (dd74ed300)
 - Bug 1158463 - Reorder property creation in js::FromPropertyDescriptorToObject. r=Waldo (afb9f302d)
 - Bug 1161077 - Allocate unboxed arrays in the nursery, r=terrence. (df198da45)
 - Bug 1159806 - Replace macro assertions with inline functions; r=sfink (c493b7a83)
 - Bug 1161353 - Remove the post-barrier verifier; r=sfink (3c64f8b44)
 - pointer style (0f1785941)
 - Bug 1148921 - Check correctness of hash table modifications later on during minor GCs, r=jonco. (6f8cf20b0)
 - Bug 1158569 - Don't trigger sweeping of dead type information when scanning unboxed objects in minor GCs, r=terrence. (7d5c9d20d)
 - Bug 1161726 - Use a custom tracer for tenuring to avoid the indirect calls; r=jonco (f2088e2ae)
 - Bug 1161353 - Follow-up to remove more post-barrier verifier cruft; r=terrence (903a81bd5)
 - Bug 1160887 - Fix various unboxed object bugs, r=jandem,terrence. (a7aca9fc9)
 - Bug 1161762 - Fix test used for whether an unboxed object layout is too large, r=jandem. (772157822)
 - Bug 1161346 - Add missing capacity for unboxed arrays, r=jandem. (9810cbf73)
 - Bug 1163810 - Use type-based dispatch for IncrementalReferenceBarrier; r=jonco (caf1273bd)
 - Bug 1162301 - Move tenuring implementation to TenuringTracer; r=sfink (5e51a3341)
 - Bug 1162303 - Simplify TenuringTracer's implementation; r=jonco (813446aa1)
 - fix order (15279b7ed)
 - Bug 1163643 - Fix unified build errors following recent marking changes r=terrence (83fe5b47a)
 - Bug 1161664 - Stay inline when visiting the WholeObject store buffer; r=sfink (d5efe7867)
 - Bug 1112627: Implement shift count saturation; r=Waldo (4f82dcabd)
 - Bug 1112627: Remove redundant inline specifier in SIMD operators impl; r=Waldo (0e6f1a31b)
 - Bug 1063946 SIMD: Group tests in logical units - conversions; r=bbouvier (35930b52c)
 - Bug 1155081 - Part 12: Replace ThrowError(JSMSG_TYPEDOBJECT_ARRAYTYPE_BAD_ARGS) with ThrowTypeError(JSMSG_TYPEDOBJECT_BAD_ARGS) in TypedObject.js. r=till (01152b406)
 - Bug 1155081 - Part 1: Replace ThrowError with ThrowTypeError in Array.js. r=till (002a1f3b9)
 - Bug 1155081 - Part 2: Replace ThrowError with ThrowTypeError in Error.js. r=till (4a76cc576)
 - Bug 1155081 - Part 3: Replace ThrowError with ThrowTypeError in Generator.js. r=till (08f8d6ae1)
 - Bug 1155081 - Part 4: Replace ThrowError with ThrowTypeError/ThrowRangeError in Intl.js. r=till (978326c2d)
 - Bug 1155081 - Part 5: Replace ThrowError with ThrowTypeError in Map.j…s/Set.js/WeakSet.js. r=till (217998d56)
 - Bug 1155081 - Part 6: Replace ThrowError with ThrowTypeError in Object.js. r=till (1c0e15e13)
 - Bug 1155081 - Part 7: Replace ThrowError with ThrowTypeError in RegExp.js. r=till (d23d58be8)
 - Bug 1155081 - Part 8: Replace ThrowError with ThrowTypeError/ThrowRangeError in String.js. r=till (c80fa9060)
 -  Bug 1155081 - Part 9: Replace ThrowError with ThrowTypeError in TypedArray.js. r=till (8311344de)
 - Bug 1155081 - Part 10: Replace ThrowError for TypeError with ThrowTypeError in TypedObject.js. r=till (44cee08bb)
 - Bug 1145058 - Annotate the SpeciesConstructor utility function with step-by-step comment numbering to make clear where we do (and do not!) follow the spec. Also fix issues related to our half-pretense of implementing this method without having first implemented the well-known @@species symbol. r=efaust (c0c60afe1)
 - Bug 1154532 - Add ThrowRangeError and ThrowTypeError intrinsics to make self-hosted code's behavior clearer -- and also have each assert that error number and requested error type are consistent. (It appears no self-hosted code throws SyntaxError, ReferenceError, or URIError yet, so no adding functions for those yet.) r=till (12b2f552f)
 - Bug 1155081 - Part 11: Replace ThrowError with ThrowTypeError in Utilities.js. r=till (b06c0c6d9)
 - Bug 1154542 - Remove a few unused error messages. r=till (f0248f8cd)
 - Bug 1147214 - Allow app: urls to use sw. r=baku (e3e1c02f5)
 - Bug 1099149 - Part 2: Add a more specific error message when 'js::ToSimdConstant' argument is of wrong type. r=bbouvier (3281bf2d6)
 - Bug 1161628 - Fix leak in ErrorWrongTypeArg. r=bbouvier (7e9c0f5f9)
 - Bug 1146718 - Split the 'J' tag in the profiler into 'J' (JIT frames without opt info) and 'O' (with opt info). (r=djvj) (d5ab6dff8)
 - Bug 1137569 - Stream and save samples and markers in the profiler on JSRuntime destruction. (r=mstange) (b1a6b9a7f)
 - Pointer style (67b999b2b)
 - Bug 1137569 - Delay stringification of JIT frames until streaming time. (r=djvj) (78d743512)
 - pointer style (716a0f543)
 - Bug 1140180 - Stop leaking TypeLists when tracking optimizations. (r=djvj) (cda2fe426)
 - Bug 1147224 - Only keep the optimization information of the last time IonBuilder visits a bytecode location. (r=djvj) (ad93a60b3)
 - pointer style (d29b2ac28)
 - Bug 1150714 - Fix streaming tracked optimizations for functions that don't have a displayAtom. (r=djvj) (c38845397)
 - pointer style (073a0adf4)
 - Bug 1150714 - Mark and sweep JitcodeGlobalMap IC entries. (r=djvj) (e9fe3dc34) (245bcf2f6)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1155006: Fix unified build sensitivities in js/src/jit. r=shu (6e24e1af1)
 - Bug 1162766 - Fix more bad implicit constructors in js. r=evilpie (39961b06d)
 - Bug 1151606 - Stream atoms instead of raw pointers for native functions in tracked optimizations. (r=djvj) (7641ee9d6)
 - pointer style (540728104)
 - Bug 1154997 - Deal with self-hosted builtins when stringifying tracked optimization type info. (r=djvj) (92f9a54e6)
 - pointer style (45742d820)
 - Bug 1154115 - Rewrite the JSAPI profiling API to use a FrameHandle, as to avoid multiple lookups in JitcodeGlobalTable. (r=djvj) (4d202ba9e)
 - Bug 1119023 - Timeline in new perf tool should filter out markers, r=jsantell (6fc1a8bbe)
 - Bug 1132755 - Allocations tree has a bunch of columns that don't make sense, r=jsantell (1ae9ee7e2)
 - Bug 1142744 - Fix tests broken by bug 1132755, r=me (cc495f72d)
 - Bug 1133058 - OptionsView button, when clicked, should have an 'open' attribute. r=vp (65a78d896)
 - Bug 1132765 - Pass through performance memory options for 'probability' and 'maxLogLength' from the front to the memory actor. r=vp (f9bbbe098)
 - Bug 1141817 - Fix yield statement to correctly return memory actor state so that the performance tool can poll for allocations during recording. r=vp (2ddf7d528)
 - Bug 1141817 - Followup to fix additional intermittents like bug 1132370, r=vp (eab962f01)
 - Bug 1142748 - Use a single configuration for starting/stopping recordings, r=jsantell (0181b319a)
 - bit of Bug 879008 - New UI for the sampling Profiler (32c4d0fe8)
 - Bug 1123815 - Merge gum into fx-team to enable the Performance++ tool, r=me (84aabbd61)
 - Bug 1143933 - Expose raw JIT optimization information in performance front end. r=vp,shu (f68a6df50)
 - Bug 1143915 - Allow multiple calls to memory and timeline actor's start methods, to return the local start time from the actor. r=vp (028ac4187)
 - Bug 978948 - Add animation generator support for setTimeout in the canvas debugger. r=vp (42d623452)
 - Bug 985488 - Allow canvas debugger to time out and stop recording frames. Canvas debugger 'wait' style now matches other media styles. Update labels in canvas debugger to explicitly state that it's waiting for rAF cycles, rather than appearing as if something went wrong. r=vporof (b4670d843)
 - Bug 1144163 - Add a rulers highlighter; added unit test. r=pbrosset (5811a67d0)
 - Bug 1144163 - Add a rulers highlighter; added highlighter. r=pbrosset (779f88bdd)
 - Bug 1144163 - Add a rulers highlighter; added gcli command and button. r=pbrosset (d0d13da51)
 - Bug 1110550 - Enable performance overview graphs to rerender and change on devtools theme switch. r=vp (bd91ca7cf)
 - Bug 1149630 - Performance graphs should inherit from a common graph and be similarly styled. r=vporof (481c841f1)
 - Bug 1150733 - Correctly internationalize jit samples label. r=vporof, r=flod (b5612d1a6)
 - Bug 1137518 - FlameGraph's destroy function should be async, r=jsantell (f103e4c15)
 - Bug 1137503 - Avoid potential infinite loops in `findOptimalTickInterval` functions, r=jsantell (95df6c04a)
 - Bug 1121194 - Support vertical panning for the flamegraph in the new performance tool, r=jsantell (06241b5b2)
 - Bug 1121180 - Support dark theme in flamecharts for the performance tool. r=vp (c76abe237)
 -  Bug 1059308 - Add Target.isTabActor to tell if the remote tab actor supports attach/detach requests. r=jryans (e03dcef93)
 - Bug 1132370 - Wrong State: Expected 'attached', but current state is 'detached', r=jsantell (e884e8db9)
 - No Bug - Fix documentation for _startMemory and _stopMemory in performance/modules/front.js, r=me DONTBUILD (d79090b31)
 - Bug 1147656 - Remove duplicate profiler defaults from the front end and just use on the server. r=vp (35c015dd0)
 - Bug 1046234 - Add more DevTools Telemetry measures (display size etc) r=pbrosset, r=gijs (a235681b4)
 - actually package telemetry.js (e8f3a58a4)
 - Bug 1077464 - Wire console.profile/profileEnd to the new performance tool. Move most of the recording-model logic from the front end into the PerformanceFront and PerformanceActorConnection so it can manage recordings without the front end being viewed. r=vp,jryans,pbrosset (eef8e18c3)
 - Bug 1144363 - Fix this._telemetry is undefined in gDevTools. r=bgrins (ba7d02902)
 - init telemetry, missing parts of Bug 866642 (1e70df975)
 - do not use sysctl.h on Linux anymore, since it is not provided by recent glibc (b2467d7ce)
 - clean up some telemetry issues of histogram, parts of  Bug 974171 (d30c8d0ad)
 - move devtools to browser - part 1 (9a856f452)
 - Bug 1291423: Explicitly qualify the destructor call that we invoke in Maybe::reset. r=Waldo (944904a7d)
 - Bug 1148075 - Dynamically add XUL commands for the debugger frontend. r=vporof (60bc91f8f)
 - Bug 1147945 - Let the profiler's buffer size and sample rate be configurable via prefs. r=vp (acebcbdd9)
 - Bug 1124326 - Improve packageDir support for Cordova. r=ochameau (4b736580a)
 - Bug 1124326 - Support Cordova w/o build file. r=ochameau (d4b50aeae)
 - Bug 1134029 - Fix 'Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIURI.host]' timeouts, r=jsantell (18d16a5d0)
 - Bug 1147806 - Content frame filtering is confused when profiling FxOS, r=jsantell (b3c62c552)
 - Bug 1108843 - Generalize platform data in call tree view when platform data is hidden. r=vporof (354553ed7)
 - Bug 1138928 - Display only function name and file, instead of full url, in flame graphs. r=vp (4169689c1)
 - Bug 1152605 - Should not show host names for chrome URIs. r=vporof (c6dcf9e78)
 - Bug 1147604 - Inverted call trees should list (root) as leaves. r=jsantell (01768267f)
 - Bug 1075450 - Disable some Awesomebar actions for private windows r=mak (21d5586e7)
 - Bug 1120616 - Part 1: Implement filter styles in rule view r=bgrins (b66ee0282)
 - Bug 1120616 - Part 2: Add unit tests for filter styles in rule view r=bgrins (2892503d8)
 - Bug 1120616 - Part 3: Adjust the styles in the computed view's filter style search r=bgrins (41f8fae1b)
 - Bug 1120616 - Part 4: Add textbox context menu for rule and computed view r=bgrins (ff3f868ad)
 - Bug 1120616 - Part 5: Refactor style inspector tests to use synthesizeKeys r=bgrins (41db021d7)
 - Bug 1102219 - Part 5: Replace more `String.prototype.contains` with `String.prototype.includes` in chrome code. r=till (86ed03588)
 - Bug 1154018 - Check to see that nsIURI's host exists when parsing location for framenodes, and cache failures. r=vp (9494d52e7)
 - Bug 1160691 - Optimize FrameUtils.isContent and FrameUtils.parseLocation. (r=jsantell) (09118fd5d)
 - Bug 1154115 - Make the performance devtool handle the new profiler JSON format. (r=jsantell,vporof) (e3e5be7a4)
 - Bug 1059308 - Make frame selection button to work in browser toolbox. r=jryans,past (30fe6e61e)
 - Bug 1059308 - Fix tests to support chrome actor. r=jryans (01cf3926c)
 - Bug 1147042 - Rename attachProcess to getProcess. r=ochameau (0393ffb80)
 - Bug 1145824 - Profiler actor and performance tools now handle passing in a startTime to filter out SPS profiles on platform rather than client. r=vp,fitzgen (f225116ba)
 - Bug 1157718 - Do not use Array.prototype.includes in production code that leaves nightly in performance tool. r=fitzgen (ff06d284e)
 - Bug 1140728 - Rename 'Memory' to 'Allocations' in the new performance tool. r=jsantell (f584e720f)
 - Bug 1137500 - Always wait for the overview to be rendered in tests after a recording finishes, unless otherwise specified, r=jsantell (59825e179)
 - Bug 1137487 - AbstractCanvasGraph's destroy function should be async, r=jsantell (a17ae00b5)
 - Bug 1132758 - Performance feature visibility now based on a per recording-basis, dependent on features enabled and server support. r=vp (0d080a7c2)
 - Bug 1147035 - Make DeveloperToolbar.jsm use the gBrowser.contentDocumentAsCPOW shortcut. r=past. (251eff125)
 - Bug 1151168 - Don't flush profiled threads that are pending deletion on JS shutdown and don't delete expired markers when resetting the profile buffer. (r=djvj) (90721313a) (a7bc0406e)

* Notice: the changelog above may not always applicable to XULRunner code which K-Meleon uses.

A goanna3 source tree that has kmeleon adaption patch applied is available here: https://github.com/roytam1/palemoon27/tree/kmeleon76